Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: MwCYyRVxJZ64iAetZjz8jyuO5/TbKhq+7GDyoEMmtrw=
Subject key identifier: FD:31:94:0D:91:F2:BB:B9:F1:E0:69:C8:36:F1:EF:CE:8B:69:A7:CE
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 0195127E5FFEEB9289B26796286CEB7FA50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 1074
Signing time: Mon 17 Feb 2025 06:00:26 +0000
Manifest this update: Mon 17 Feb 2025 06:00:26 +0000
Manifest next update: Tue 18 Feb 2025 06:00:26 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: idyDKgc0VORsqDZCOK3Btz21pEDr+6A+1rMgDn4iTKU=)
2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:5f:fe:eb:92:89:b2:67:96:28:6c:eb:7f:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Feb 17 06:00:26 2025 GMT
Not After : Feb 18 06:00:26 2025 GMT
Subject: CN=fd31940d91f2bbb9f1e069c836f1efce8b69a7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:f6:c0:a4:09:b9:1e:cc:b5:a8:ca:c2:31:
72:32:77:c1:9e:82:2e:6b:01:f6:6a:68:5a:ff:06:
55:d6:80:3f:ee:84:01:ee:00:61:c0:b1:10:ef:cc:
18:bf:4c:6d:bb:ec:34:74:28:46:9b:02:3a:9d:db:
bc:ba:4e:87:11:87:e3:0c:17:35:da:2b:44:5a:cd:
b7:b3:7b:4e:8d:08:57:ba:d8:2b:ff:65:03:27:08:
68:07:a1:9f:9f:62:f4:bd:22:7f:d7:0e:1c:2e:2b:
e9:19:1e:c8:ed:c9:ec:19:74:e1:65:3b:d0:cc:32:
e3:5b:5d:49:f8:e7:3e:43:88:87:54:38:f8:24:5d:
85:b8:4f:e2:c8:cd:d3:7c:ad:8a:ea:3b:51:38:91:
7f:f0:e5:7d:48:73:6d:7a:7f:cb:10:68:b4:c4:81:
1d:2d:a1:76:aa:2e:40:62:b3:ff:f3:70:1a:33:57:
f5:d8:c7:2a:5f:40:e6:2d:e6:37:66:3d:d5:f3:0e:
ea:57:eb:cd:49:da:71:02:0d:81:d6:a1:72:c4:4c:
c1:d7:d7:d6:b3:4e:43:9a:63:ff:51:9e:e3:74:15:
7f:08:54:0e:73:10:ce:72:bb:e9:9c:38:f9:7e:c3:
98:5d:7a:14:c4:af:24:01:99:9c:59:09:29:4e:2c:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:31:94:0D:91:F2:BB:B9:F1:E0:69:C8:36:F1:EF:CE:8B:69:A7:CE
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:37:85:be:c5:e9:ae:34:92:37:7a:d3:ad:6d:a6:b4:46:
0e:f2:98:0a:b6:24:c1:46:ce:ce:23:3f:7c:04:73:00:66:98:
77:53:45:ac:a0:74:da:c2:45:a4:62:df:3c:09:5d:69:6b:20:
ca:af:ad:6e:b6:66:e4:23:f7:12:a5:55:51:ed:79:13:1b:ec:
55:3e:b9:6c:04:1a:4c:1f:aa:cc:57:0c:33:88:2b:d8:a7:1d:
11:9b:31:98:ad:b8:38:8b:ee:48:bb:fb:6b:4b:2f:b0:c0:df:
87:2a:11:7d:53:60:0d:55:40:ce:6d:f0:99:5f:6b:3d:6e:94:
c9:95:96:89:09:8d:dc:56:27:aa:0d:02:a7:04:9c:9c:b0:32:
df:2f:6f:06:9c:4c:f8:6e:82:ce:a2:9a:68:f4:47:2f:46:f2:
67:47:31:26:d3:ff:1f:9d:93:f9:bd:0e:1d:49:ca:87:8d:cc:
e3:b4:d8:95:f7:85:12:fd:fe:ae:49:43:f3:2f:79:8b:99:5d:
48:88:86:e2:c3:b9:d3:2d:e9:37:c6:ad:c7:74:8d:04:38:58:
10:83:76:9b:19:5c:ed:9f:27:8b:5a:98:b0:27:e4:7a:bc:8a:
41:a5:33:a0:24:73:f8:0a:23:61:d7:96:4e:86:d1:95:b1:f8:
84:96:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:10 2025 by rpki-client